Prentice Bisbal <[EMAIL PROTECTED]> writes: > John Hearns wrote: >> On Fri, 2008-08-01 at 15:37 +1000, Chris Samuel wrote: >> >>> We'd prefer to steer clear of Kerberos, it introduces >>> arbitrary job limitations through ticket lives that >>> are not tolerable for HPC work. >> >> Kerberos is heavily used at CERN. They have a solution for that issue - >> the job can ask for an extension to the tickets. >> Sorry, I don't have a reference handy but its worth documenting this for >> the list. > > If ANYONE has more information on how this is done at CERN, I'd be very > interested in hearing about it. I know, I know... GIYF...
I doubt they're dong anything unusual -- this is a completely normal thing any Kerberos setup deals with. You just stash the private key on the server, request a long ticket lifetime and refresh reasonably tickets frequently. Standard documentation can tell you how to do it -- just read the manuals. Perry -- Perry E. Metzger [EMAIL PROTECTED] _______________________________________________ Beowulf mailing list, Beowulf@beowulf.org To change your subscription (digest mode or unsubscribe) visit http://www.beowulf.org/mailman/listinfo/beowulf
